Code

[WIP] New ACLs#4791

Code

Merged

mkeeler merged 85 commits intorelease/1.4-staginghashicorp/consul:release/1.4-stagingfrom feature/acl-v2hashicorp/consul:feature/acl-v2Copy head branch name to clipboardOct 19, 2018

+20,202-5,879

Commits

Commits on Oct 19, 2018

• Update docs to include multiple tag support (#4797)

  Show description for da69a11
  

  Rebecca Zanzig

  authored and

  mkeeler

  committed
  da69a11

  Copy full SHA for da69a11

• New ACL System

  Show description for 92183c9
  mkeeler

  committed
  92183c9

  Copy full SHA for 92183c9

• Implement legacy flag in HTTP response and add CreateTime to tokens

  mkeeler

  committed
  f40b475

  Copy full SHA for f40b475

• Fix a segfault in ACLTokenRead

  mkeeler

  committed
  794acd4

  Copy full SHA for 794acd4

• Allow missing accessor id and secret id for token updates

  mkeeler

  committed
  c426178

  Copy full SHA for c426178

• Implement acl version advertisement via serf tags

  Show description for 1332f72
  mkeeler

  committed
  1332f72

  Copy full SHA for 1332f72

• Minor change to get rid of name conflict.

  mkeeler

  committed
  daf9d61

  Copy full SHA for daf9d61

• Refactor of the serf tag helpers

  mkeeler

  committed
  f59054a

  Copy full SHA for f59054a

• Get rid legacy state store functions

  Show description for 27875e0
  mkeeler

  committed
  27875e0

  Copy full SHA for 27875e0

• Initial Token Auto-Upgrade

  Show description for 51a7dd6
  mkeeler

  committed
  51a7dd6

  Copy full SHA for 51a7dd6

• Dont attempt to use a nil SerfWAN on the server

  mkeeler

  committed
  fc18af0

  Copy full SHA for fc18af0

• Implement legacy token upgrade

  Show description for fef484f
  mkeeler

  committed
  fef484f

  Copy full SHA for fef484f

• Update memdb vendoring

  Show description for b266efc
  mkeeler

  committed
  b266efc

  Copy full SHA for b266efc

• Updates to the HTTP APIs

  Show description for c0a1cd6
  mkeeler

  committed
  c0a1cd6

  Copy full SHA for c0a1cd6

• Remove unused import

  mkeeler

  committed
  f61d574

  Copy full SHA for f61d574

• acl list endpoints never return nil

  Show description for 27503a9
  mkeeler

  committed
  27503a9

  Copy full SHA for 27503a9

• Fixup the token clone endpoint and a few other internal changes

  mkeeler

  committed
  074bc69

  Copy full SHA for 074bc69

• Initial acl replication

  Show description for ab97009
  mkeeler

  committed
  ab97009

  Copy full SHA for ab97009

• Make sure to only list global tokens for replication

  mkeeler

  committed
  9a5f764

  Copy full SHA for 9a5f764

• A couple build system fixes

  Show description for 18da312
  mkeeler

  committed
  18da312

  Copy full SHA for 18da312

• Policy replication working

  Show description for d9fc6a1
  mkeeler

  committed
  d9fc6a1

  Copy full SHA for d9fc6a1

• Replication Working!

  Show description for fccc1ea
  mkeeler

  committed
  fccc1ea

  Copy full SHA for fccc1ea

• ACL CLI

  Show description for 60590d8
  mkeeler

  committed
  60590d8

  Copy full SHA for 60590d8

• ACL Token CLI implementation.

  mkeeler

  committed
  fe6bca6

  Copy full SHA for fe6bca6

• Update 1.3 code for new ACLs

  mkeeler

  committed
  03583cd

  Copy full SHA for 03583cd

• Update some missing CLI help descriptions.

  mkeeler

  committed
  612dc6c

  Copy full SHA for 612dc6c

• New StopChannelContext that implements the context.Context interface

  Show description for 816eb84
  mkeeler

  committed
  816eb84

  Copy full SHA for 816eb84

• Addressed most of the TODOS and a few misc. issues

  mkeeler

  committed
  88c7e63

  Copy full SHA for 88c7e63

• fnv -> blake2b for hashing

  Show description for a38eef1
  mkeeler

  committed
  a38eef1

  Copy full SHA for a38eef1

• Default ACLDatacenter to the primary Datacenter.

  mkeeler

  committed
  2228fb7

  Copy full SHA for 2228fb7

• Add some more acl Authorizer tests

  mkeeler

  committed
  8f53e9b

  Copy full SHA for 8f53e9b

• Finish up ACL unit tests

  Show description for 8b937e8
  mkeeler

  committed
  8b937e8

  Copy full SHA for 8b937e8

• Fix primary datacenter config builder

  mkeeler

  committed
  36e2f3b

  Copy full SHA for 36e2f3b

• PR fixes

  mkeeler

  committed
  e6324ff

  Copy full SHA for e6324ff

• Use config struct when creating an ACLResolver

  mkeeler

  committed
  49d2ec9

  Copy full SHA for 49d2ec9

• comment about rate.Limit semantics

  mkeeler

  committed
  149cf99

  Copy full SHA for 149cf99

• finish comment

  mkeeler

  committed
  8a647d4

  Copy full SHA for 8a647d4

• Use a Context instead of creating stopCh ourself for ACL replication/upgrade

  mkeeler

  committed
  9662497

  Copy full SHA for 9662497

• Add some comments about the bootstrap override

  mkeeler

  committed
  983dd52

  Copy full SHA for 983dd52

• Add some comments and change some var names about async token/policy resolution

  mkeeler

  committed
  3e10a74

  Copy full SHA for 3e10a74

• Add some more general comments about the bootstrap reset

  mkeeler

  committed
  ee6e158

  Copy full SHA for ee6e158

• More async resolve comments

  mkeeler

  committed
  38beffa

  Copy full SHA for 38beffa

• Remove the rateLimit const as it is now in the agent config.

  mkeeler

  committed
  bd8a319

  Copy full SHA for bd8a319

• Change acl.token_replication to acl.enable_token_replication

  Show description for 9538ce4
  mkeeler

  committed
  9538ce4

  Copy full SHA for 9538ce4

• Fixing tests and bugs

  Show description for dcd7b37
  mkeeler

  committed
  dcd7b37

  Copy full SHA for dcd7b37

• Fix a few issues

  Show description for a5e7c97
  mkeeler

  committed
  a5e7c97

  Copy full SHA for a5e7c97

• Fixup the TestACL_Bootstrap test

  mkeeler

  committed
  502d5f6

  Copy full SHA for 502d5f6

• Rewrite agent/acl_test.go

  Show description for 2218499
  mkeeler

  committed
  2218499

  Copy full SHA for 2218499

• Implement tests for the Policy CRUD endpoints

  Show description for 178effc
  mkeeler

  committed
  178effc

  Copy full SHA for 178effc

• Finish up the ACL HTTP testing

  Show description for 284d478
  mkeeler

  committed
  284d478

  Copy full SHA for 284d478

• Get rid of a couple todos and move some test code.

  mkeeler

  committed
  42d879a

  Copy full SHA for 42d879a

• Implement ACLToken struct tests.

  mkeeler

  committed
  e2f7441

  Copy full SHA for e2f7441

• Get rid of ACLToken.IsSame and ACLPolicy.IsSame

  Show description for 0b3d374
  mkeeler

  committed
  0b3d374

  Copy full SHA for 0b3d374

• Finish up the ACLPolicy struct testing.

  mkeeler

  committed
  d04ad34

  Copy full SHA for d04ad34

• Start Implementing the acl cache tests.

  mkeeler

  committed
  595334d

  Copy full SHA for 595334d

• Don’t assume global mgmt policy for unupgraded management tokens

  Show description for 02646e4
  mkeeler

  committed
  02646e4

  Copy full SHA for 02646e4

• Fix a bunch of consul pkg tests

  mkeeler

  committed
  2748fd2

  Copy full SHA for 2748fd2

• Fix the bootstrap test

  mkeeler

  committed
  5275a4a

  Copy full SHA for 5275a4a

• Fix usage of the ACL Down Policy

  mkeeler

  committed
  23a87b5

  Copy full SHA for 23a87b5

• Get TestACLReplication working

  mkeeler

  committed
  e16a5f5

  Copy full SHA for e16a5f5

• Fix a few more tests.

  mkeeler

  committed
  ca540ab

  Copy full SHA for ca540ab

• Return acl.ErrNotFound if policy/token isn’t in local store but would be if it existed.

  mkeeler

  committed
  1d93a8b

  Copy full SHA for 1d93a8b

• Fix some bootstrap tests

  mkeeler

  committed
  1cf16c4

  Copy full SHA for 1cf16c4

• Get rid of double acl init

  mkeeler

  committed
  6cc447a

  Copy full SHA for 6cc447a

• Make sure to init the map

  mkeeler

  committed
  5ca52a8

  Copy full SHA for 5ca52a8

• ACLResolver tests

  Show description for 5edb06a
  mkeeler

  committed
  5edb06a

  Copy full SHA for 5edb06a

• Implement ACLResolver legacy tests

  Show description for 0e77b9f
  mkeeler

  committed
  0e77b9f

  Copy full SHA for 0e77b9f

• Update some more struct tests

  mkeeler

  committed
  3ce2ab1

  Copy full SHA for 3ce2ab1

• Fix global-management policy

  Show description for 78817d9
  mkeeler

  committed
  78817d9

  Copy full SHA for 78817d9

• ACL V2 CRUD RPC testing (#4815)

  Show description for 089db9a
  

  pearkes

  authored and

  mkeeler

  committed
  089db9a

  Copy full SHA for 089db9a

• Request policy ids

  mkeeler

  committed
  d8aa31b

  Copy full SHA for d8aa31b

• Legacy FSM tests working

  mkeeler

  committed
  8faf670

  Copy full SHA for 8faf670

• Implement snapshot save/restore tests

  mkeeler

  committed
  2ab1b7d

  Copy full SHA for 2ab1b7d

• Handle deleting a non-existant token.

  mkeeler

  committed
  f4bf435

  Copy full SHA for f4bf435

• Fix bootstrapping

  mkeeler

  committed
  8bf2b1f

  Copy full SHA for 8bf2b1f

• ACL V2 RPC additional RPC tests (#4816)

  Show description for b05ea71
  

  pearkes

  authored and

  mkeeler

  committed
  b05ea71

  Copy full SHA for b05ea71

• Add a few easy acl replication tests

  mkeeler

  committed
  3501651

  Copy full SHA for 3501651

• Change how we determine the ACL DC and if ACLs are enabled.

  mkeeler

  committed
  577abdc

  Copy full SHA for 577abdc

• [WIP] ACL V2 CLI Tests (#4817)

  Show description for c1cc982
  

  pearkes

  authored and

  mkeeler

  committed
  c1cc982

  Copy full SHA for c1cc982

• Fix json + mapstructure decoding issue.

  mkeeler

  committed
  65ec4ed

  Copy full SHA for 65ec4ed

• Add state store snapshot/restore tests for tokens and policies

  mkeeler

  committed
  9a1c335

  Copy full SHA for 9a1c335

• Update lots of tests

  mkeeler

  committed
  f5742f9

  Copy full SHA for f5742f9

• Prevent legacy endpoints from blowing away some new token data.

  mkeeler

  committed
  b54033e

  Copy full SHA for b54033e

• API test fixup

  mkeeler

  committed
  95bdb8a

  Copy full SHA for 95bdb8a

• Fix the last few existing unit tests.

  mkeeler

  committed
  755005d

  Copy full SHA for 755005d